Abstract:
A server architecture based on asymmetric 3-way TCP (ATCP) is disclosed that can distribute the work among multiple processors. In particular, the server system has a front-end server receiving a service request from a client. The server system also has a back-end server that receives a command from the front-end server. The back-end server sends the result back directly to the client in a pseudo packet that looks like a packet sent from the front-end server. The pseudo packet has the IP address and the port number of the front-end server. A scalable system is achieved because the bottleneck through the front-end server is avoided.
Abstract:
An architecture for resource management of an IP-based cellular radio access network is presented. A measurement-based admission control scheme is used to monitor the load for each path in the network and QoS (quality of service) class and resource decisions are made based upon that information. A bandwidth broker is introduced in the cellular radio access network (RAN). The bandwidth broker processes the on-demand admission requests for IP resources by using the results of load control measurements. Since the requests can be processed very quickly using a simple table look-up, response times are fast, and the architecture is thus suitable for the cellular environment.
Abstract:
A router device and a cut-through path control method capable of carrying out the load balancing at an intermediate router device which actually has a multi-path information, without requiring a special processing at the edge router are disclosed. At a router device at which multi-path exists, one router among a plurality of routers that can possibly be a next hop router is selected so as to contribute to a load balancing, according to a whole or a prescribed part of information regarding a state of cut-through path set up in which the router device is involved, at a time of setting up a cut-through path in the multi-path, and a prescribed control for setting up the cut-through path with that one router as the next hop router is carried out. Also, one cut-through path that contributes to the load balancing when a route change is made is selected among cut-through paths for which the route change at the router device is possible, and a route of that one cut-through path is changed so as to contribute to the load balancing.
Abstract:
Methods and systems for load balancing a plurality of entities, such as firewalls, in a network environment are disclosed. In particular, the load balancing of firewalls on a bidirectional traffic path is performed using a single device that controls both incoming and outgoing traffic through the firewalls. The single device may include virtual routers for controlling the bidirectional traffic through the firewalls. A first virtual router may control incoming traffic to the firewalls and the other virtual router may control outgoing traffic to the firewalls. The virtual routers are logical partitions of the device layered on the physical resources of the device. The virtual routers share all or portions of the physical resources of the single device.
Abstract:
The invention provides techniques for adaptive load balancing. Techniques are provided for monitoring a server's operating conditions; determining, based on the server's operating conditions, when to send a behavior modification hint to one or more clients that are being served by the server; generating the behavior modification hint based on the server's operating conditions; and sending the behavior modification hint to the one or more clients. A client receives the behavior modification hint and, based on the behavior modification hint, alters a timeout value related to the server or alters its preferred server.
Abstract:
A firewall clustering system connects two or more firewalls between an internal network and an external network. The plurality of two or more firewalls are combined to supply high-availability and scaling of processing capacity. Firewalls maintain client-server state information. Flow controllers are connected to the firewalls and placed on both the internal “trusted” side and the external “untrusted” side of the firewalls. Flow controllers are placed on both sides of the firewalls to ensure that traffic for a given client-server session flows through the same firewall in both inbound and outbound directions. The firewalls perform filtering operations and/or network address translation (NAT) services. In both cases, the flow controllers supply high availability, scalability, and traffic distribution for the firewalls in the firewall cluster.
Abstract:
This invention relates to a method, system and the computer readable program product wherein the least loaded boot server is prioritized for service by a single DHCP/PXE server by maintaining a boot server allocation table (SAT) containing the existing client load count for each boot server, maintaining a client allocation table (CAT) associating each client IP address with the corresponding boot server IP address, prioritizing the boot servers by sorting said SAT in order of increasing load count whenever it is updated and providing the IP address of the boot servers in the sequence of their listing in said SAT for access whenever a client requests the DHCP.
Abstract:
The present invention relates to an addressing method and system for using an anycast address, wherein a data source or server (21 to 23) can be registered in a network device to become a possible receiver for anycast traffic for a specific anycast address. This is achieved by providing a mapping and binding update function of the anycast address to the server's real address. The anycast server can provide authentication data to the client providing a proof that the server indeed has been authorized to respond to the used anycast address. Thereby, an anycast address can be used as a source address and an authorization of anycast servers can be provided.
Abstract:
Methods and apparatus for processing registration requests by a Home Agent supporting Mobile IP are disclosed. A registration request is received from each of a plurality of Mobile Nodes, the registration request specifying a care-of address. A binding is established between each of the plurality of Mobile Nodes and the associated care-of address, each of the plurality of Mobile Nodes being associated with one another. For instance, the plurality of Mobile Nodes may be statically or dynamically assigned the same Home Address. A tunnel is then created between the Home Agent and the care-of address for each of the plurality of Mobile Nodes, thereby enabling a server request to be distributed by the Home Agent to one of the plurality of Mobile Nodes via the associated tunnel. For instance, a server request addressed to the Home Address may be forwarded to one of the Mobile Nodes assigned that Home Address.
Abstract:
The basic problem addressed by the present invention is the free disposition of users, without restrictions on users identifiers, among a plurality of AAA-servers within an ISP network for allowing AAA-service network scalability and for hiding the AAA-service network configuration to external AAA-clients. The present invention solves the problem discussed above by placing a User Selector Proxy as entry point to the AAA-service network within an ISP network, the User Selector Proxy responsible for determining an AAA-server in charge of the user and able to direct AAA-service requests to the appropriate AAA-server.